Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/WZJH_ooSqUDE8CuUHonLIGQeTwM.roa
File: WZJH_ooSqUDE8CuUHonLIGQeTwM.roa (raw, json)
Hash identifier: PXoHbbx7PHb2+Knkp3tuLg6G82PksLK6/WnPXwU1W1E=
Subject key identifier: 59:92:47:FE:8A:12:A9:40:C4:F0:2B:94:1E:89:CB:20:64:1E:4F:03
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019A00F182F803A5FA5ED173E2C45D51AF6D
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/WZJH_ooSqUDE8CuUHonLIGQeTwM.roa
Signing time: Mon 20 Oct 2025 09:26:59 +0000
ROA not before: Mon 20 Oct 2025 09:26:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47309
IP address blocks: 130.0.20.0/23 maxlen: 23
194.8.90.0/23 maxlen: 23
212.99.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:f1:82:f8:03:a5:fa:5e:d1:73:e2:c4:5d:51:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Oct 20 09:26:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=599247fe8a12a940c4f02b941e89cb20641e4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:23:74:32:7e:45:6d:c2:94:70:31:43:79:
da:18:b2:89:78:64:8d:a6:3f:58:d2:a5:95:bd:26:
5a:1c:0b:f0:d9:a4:3c:56:cb:2a:bf:5e:ce:76:31:
cd:5d:1b:cf:27:a2:1b:8d:08:6f:2f:9f:87:1b:be:
37:5c:c2:c5:b4:f7:e6:b2:53:41:0e:a3:b3:ec:fc:
9a:d3:82:25:b1:bf:86:70:f7:c0:75:5f:2b:88:70:
80:6a:7e:0c:ed:45:5a:f5:72:bc:e5:9b:41:6e:54:
3c:ba:d6:5a:57:35:5f:f9:b0:64:ba:8d:6f:71:db:
6d:05:7d:34:88:ba:47:88:c1:03:ad:c2:5f:c2:fb:
98:0b:92:c8:77:b3:bd:a9:d1:f2:ef:53:9e:26:bc:
5c:47:8e:83:1d:03:8f:d8:b2:47:b2:4d:58:04:e6:
5f:78:3f:80:e6:63:a6:d2:54:0a:21:92:61:8f:f3:
13:33:0c:c3:aa:06:51:4b:bf:0b:df:43:5e:73:3a:
01:8d:1f:3b:a7:55:b3:17:c8:a1:22:dc:13:a6:1c:
6a:a8:5a:b5:f4:89:6f:a5:c3:7d:cf:a5:7f:09:14:
31:99:4e:e3:ee:76:7c:c3:52:12:34:46:f8:c9:6b:
1d:d0:ab:2e:d2:ae:fb:86:ed:e4:fe:d3:cf:ef:f0:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:92:47:FE:8A:12:A9:40:C4:F0:2B:94:1E:89:CB:20:64:1E:4F:03
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/WZJH_ooSqUDE8CuUHonLIGQeTwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.20.0/23
194.8.90.0/23
212.99.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:40:10:b2:ed:92:3c:fc:de:71:b8:a3:22:1c:f9:18:03:48:
e8:cb:6b:a1:14:ae:d2:ab:1b:26:ec:e6:a7:22:0b:a1:b8:f4:
3d:22:66:99:24:49:ed:be:75:a8:ba:55:85:1c:85:eb:97:97:
d7:eb:5a:43:70:03:f7:8c:50:04:e8:41:ca:f1:5c:ea:0c:22:
0a:01:93:90:f4:89:11:d8:65:2b:54:98:ad:9d:87:f3:66:c6:
57:f0:44:27:52:ef:fe:6b:53:36:30:dd:3c:c3:6b:8e:a8:0e:
fe:cc:5c:2c:ae:8c:60:93:0e:3d:b3:ec:d1:fb:62:3d:9c:a5:
0c:01:b0:c5:74:ef:3c:97:16:26:7b:18:b8:fc:d4:c7:3f:b9:
7a:05:87:65:eb:bc:f2:31:ed:af:ca:96:46:6c:52:59:e7:11:
40:33:f6:9f:05:fd:37:08:c7:31:55:d0:10:85:22:1f:97:da:
00:64:18:bb:43:3a:1d:1b:ea:91:f0:0c:ac:80:d7:89:7d:57:
d7:10:1f:10:b8:93:45:1b:6e:36:18:f9:3c:c1:c4:77:0e:79:
37:73:42:98:f9:84:66:d7:7a:27:bd:78:45:e8:22:0f:82:82:
4d:f0:b2:04:1e:c5:5d:6e:de:6c:4b:00:97:ac:d3:53:54:b3:
ad:25:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:23:54 2025 by rpki-client